<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<Events>
  <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
      <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM"/>
      <EventID Qualifiers="0">10016</EventID>
      <Version>0</Version>
      <Level>3</Level>
      <Task>0</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8080000000000000</Keywords>
      <TimeCreated SystemTime="2020-06-05T16:14:04.1983617Z"/>
      <EventRecordID>298</EventRecordID>
      <Correlation ActivityID="{0f370019-fc6f-4227-aeed-fba400ec086c}"/>
      <Execution ProcessID="892" ThreadID="2400"/>
      <Channel>System</Channel>
      <Computer>DESKTOP-4AR7BIA</Computer>
      <Security UserID="S-1-5-18"/>
    </System>
    <EventData>
      <Data Name="param1">application-specific</Data>
      <Data Name="param2">Local</Data>
      <Data Name="param3">Launch</Data>
      <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
      <Data Name="param5">Unavailable</Data>
      <Data Name="param6">NT AUTHORITY</Data>
      <Data Name="param7">SYSTEM</Data>
      <Data Name="param8">S-1-5-18</Data>
      <Data Name="param9">LocalHost (Using LRPC)</Data>
      <Data Name="param10">Unavailable</Data>
      <Data Name="param11">Unavailable</Data>
    </EventData>
  </Event>
</Events>
